News & Analysis as of May 12, 2025

Regulatory Oversight

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

From Consent or Pay to AI Oversight: EDPB Expands Its Regulatory Reach in 2024

HaystackID on 4/25/2025

What happens when data protection collides with the relentless pace of digital innovation? That’s the question the European Data Protection Board (EDPB) seemed to confront head-on in 2024, a year marked by unprecedented...more

Zooming in on AI – #10: EU AI Act – What are the obligations for “high-risk AI systems”?

A&O Shearman on 10/30/2024

Companies deploying high-risk artificial intelligence (AI) systems must prepare to navigate a complex landscape of new obligations by August 2, 2026. In this post we explain the key obligations for providers and deployers of...more

GDPR Day 2024: A Look at Past, Present and Future Developments in the UK

Littler on 5/31/2024

May 25th marked six years since the General Data Protection Regulation has been in effect. Since it was implemented, GDPR has been regarded as the gold standard for data protection legislation across the world....more

Data Privacy Guide - Spain

International Lawyers Network on 5/15/2024

Introduction - We have compiled the main differences between the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing...more

Data Privacy Guide - Romania

International Lawyers Network on 5/13/2024

Governing Data Protection Legislation - 2.1. Overview of principal legislation - The General Regulation Data Protection (Regulation (EU) 2016/679) (“GDPR”), as implemented by Law 190/2018 is the principal data...more

Data Privacy Guide - Portugal

International Lawyers Network on 5/7/2024

Introduction - Data protection is being driven by rapid technological advances and the increasing digitalization of society. Data protection legislation in Portugal is aligned with European Union law, in particular with...more

Data Privacy Guide - Czech Republic

International Lawyers Network on 5/3/2024

Introduction - The General Data Protection Regulation (Regulation (EU) 2016/679) is the EU regulation which is directly applicable in all member states of the EU, including the Czech Republic, as of 25 May 2018. The new...more

The EU’s AI Act: Obligations of AI Users and GDPR Article 35

Ankura on 4/19/2024

In December 2023, European Union (EU) lawmakers reached an agreement on the EU AI Act. In our article titled An Introduction to the EU AI Act, we focused on applicability, thresholds, timing, and penalties related to the EU...more

Developing a Global Data Protection Framework for Artificial Intelligence in the Workplace

Littler on 3/1/2024

As employment-related artificial intelligence (“AI”) tools proliferate, multinational employers feel increasing pressure to deploy AI across their global offices. These tools can provide great value and efficiency across the...more

Key Takeaways on eDiscovery/eDisclosure, Info Governance and Collaboration from The Master’s Conference in London

CloudNine on 8/3/2023

Exceeding Corporate Client Expectations - The first session of the conference, moderated by Richard Clark from CloudNine, focused on introducing new ways of deepening the relationship between corporate in-house and outside...more

Secure Data Disposal and Data Minimization

Alston & Bird on 2/13/2023

What data can companies collect, and how long can they keep it? Our Privacy, Cyber & Data Strategy Team outlines best practices for companies to comply with international, federal, and state laws and guidance to avoid...more

Privacy and Cybersecurity Training: Addressing Regulatory Concerns

Sheppard Mullin Richter & Hampton LLP on 7/13/2022

As we pass the half-way mark of 2022, many are reflecting on their privacy compliance progress. One area that seems to be a constant battle is training. How much is needed? What kind of training? What are expectations from...more

US Tech Companies Under Increased Scrutiny from EU Data Protection Authorities

Jenner & Block on 1/28/2022

By the close of 2021, EU data protection authorities (“DPA”) had initiated investigations into a number of US tech companies operating in Europe and further investigations are set to continue. In a recent case concerning...more

Looking Back at Data Privacy Developments in 2021: Part One – the U.S.

Epiq on 1/5/2022

With the start of a new year, it is the perfect time to reflect on major legal movement with consumer privacy last year both in the U.S. and abroad. Data privacy is a hot issue that will continue to trend as more countries...more

EU and UK Data Sharing: UK Adequacy Decision

McDermott Will & Emery on 2/22/2021

On February 19 2021, the European Union Commission issued its draft adequacy decision for data flows between the European Union (EU) and United Kingdom (UK). Whilst widely expected, this draft decision will provide some...more

EU committee calls on Commission to set out common blockchain approach

Hogan Lovells on 3/5/2020

An advisory committee to EU institutions has issued an opinion on blockchain and the EU single market, advising the European Commission on potential next steps, including launching a "comprehensive" blockchain initiative,...more

The eData Guide to GDPR: New York’s SHIELD Act Defines Records Management as a Reasonable Safeguard

Morgan Lewis on 1/29/2020

New data retention limitations and disposal requirements on some types of businesses in New York will go into effect on March 21, 2020, under the Stop Hacks and Improve Electronic Data Security (SHIELD Act) that was signed...more

Should I Be Worried About the GDPR? – EDPB’S Guidelines on the GDPR’S Territorial Scope

Hogan Lovells on 12/31/2019

Does the GDPR really apply to my company? From a data protection standpoint, this is the first thing that comes to mind within non-EU companies. In many cases, the GDPR seems like an issue of the Old Continent, so some assume...more

Revised Guidelines on the Territorial Scope of the GDPR and Local Representatives

Mintz - Privacy & Cybersecurity Viewpoints on 12/2/2019

The European Data Protection Board (EDPB) recently published an updated version of its guidelines on the territorial scope of the GDPR, which were initially issued just over a year ago. The revised Guidelines do not...more

A Turning Point for Tech – Global survey on digital regulation

Hogan Lovells on 10/31/2019

Whilst political uncertainty may have businesses’ attention fixed, the Hogan Lovells Global Survey on Digital Regulation: ‘A Turning Point for Tech’ suggests that tech companies should be looking elsewhere. During yesterday’s...more

The ICO Updates Its Data Sharing Code of Practice

Hogan Lovells on 8/5/2019

On 9 July 2019 the UK data protection authority (ICO) updated its Data Sharing Code of Practice (first published in 2011) (Code). On the same day, the ICO also announced its intention to fine Marriott International just over...more

New French Guidelines on Cookies and Trackers

Hogan Lovells on 7/22/2019

On 19 July the French Data Protection Authority (the “CNIL”) published new guidelines on cookies and trackers. These replace the existing Recommendation No. 2013-378 of 5 December 2013, are intended to be in line with...more

A Year of GDPR: Five Recommendations to Help Limit Regulatory Scrutiny

Akin Gump Strauss Hauer & Feld LLP on 5/31/2019

A year ago, on May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) came into force. With its extraterritorial scope and detailed requirements, the GDPR aimed to change the approach to personal data...more

The EDPB’s Narrow View of Contractual Necessity

Hogan Lovells on 4/16/2019

The European Data Protection Board (EDPB) has adopted the narrowest possible interpretation of ‘contractual necessity’ as a ground for processing of personal data. ...more

UK House of Lords Select Committee calls for a Digital Authority to regulate the online world

Hogan Lovells on 3/29/2019

On 9 March 2019, the House of Lords Select Committee on Communications published its report on “Regulating in a digital World”. ...more

39 Results

View per page

Page: of 2

General Data Protection Regulation (GDPR) › Data Protection › Regulatory Oversight

"My best business intelligence, in one easy email…"